CVE-2026-80870

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KFD CRIU restore flow where object IDs restored from userspace are not properly validated before being passed to the idr alloc() function. Specifically, in the kfd criu restore event() and criu restore memory of gpu() functions, userspace-provided data can reach idr alloc() without checking if the values exceed signed integer limits. If a restored ID is larger than INT MAX, it can trigger a kernel WARN, which may lead to a system panic or reboot on systems where panic on warn is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.